What Is the Statement of Applicability (SOA) and What Should

question 50

Multiple Choice

What is the Statement of Applicability (SOA) and what should it be consistent with?

• A) The SOA is the end-product of the risk-assessment process and should be consistent with the ISMS policy developed in the early stages of the PDAC process.
• B) The SOA is the first draft of the risk-assessment process should be consistent with the ISMS policy developed in the early stages of the PDAC process.
• C) The SOA is the end-product of the risk-assessment process and should be contradictive to the ISMS policy developed in the later stages of the PDAC process.
• D) The SOA should be consistent with the risk assessment standards found in ISO 9002.

---

Definitions:

Agent Liability

The legal responsibility that agents may have for their actions or inactions during the course of their agency relationship, potentially leading to obligations or damages.

Customer

An individual or business that purchases goods or services from another entity.

Employees

Employees are individuals who work for a business or organization, typically in return for compensation, and are subject to the employer's control in terms of how work is done.

Apply

To make a formal request or submission for something, such as a job, program, or permission.